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AMENDMENTS TO THE CLAIMS; 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Claims 1-43. (Cancelled) 

44. (currently amended) A tamper-resistant security device having ffleafts -memory 
for storing user credentials, including at least a security key, an Authentication and Key 
Agreement (AKA) module for performing an AKA process with said security key, and moano for 
external communicatio n circuitry , 

wherein said tamper-resistant security device further comprises: 

an application for cooperation with said AKA module; and 

ffl«aH&- an interface for interfacing said AKA module and said cooperating 

application. 

45. (previously presented) The tamper-resistant security device according to claim 44, 
wherein said cooperating application performs enhanced security processing of at least one 
parameter associated with said AKA process. 

46. (previously presented) The tamper-resistant security device according to claim 45, 
wherein said enhanced security processing includes at least one of: 

pre-processing of at least one AKA input parameter; and 
post-processing of at least one AKA output parameter. 
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47. (previously presented) The tamper-resistant security device according to claim 45, 
wherein said enhanced security processing includes encapsulation of said at least one AKA 
parameter. 

48. (previously presented) The tamper-resistant security device according to claim 45, 
wherein said cooperating application is receiving at least one AKA parameter from said 

AKA process to generate a further AKA parameter that has higher security than said 
received AKA parameter. 

49. (previously presented) The tamper-resistant security device according to claim 45, 
wherein said enhanced security processing includes evaluation of a predetermined number of 
consecutive AKA input parameters for verifying that said AKA input parameters can be used 
securely. 

50. (previously presented) The tamper-resistant security device according to claim 49, 
wherein said enhanced security processing further includes combination of a predetermined 
number of consecutive AKA output parameters generated in response to a number of 
corresponding unique AKA input parameters. 

5 1 . (previously presented) The tamper-resistant security device according to claim 44, 
further comprising means for performing security policy processing based on information 
representative of security conditions in relation to said tamper-resistant security device. 
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52. (previously presented) The tamper-resistant security device according to claim 5 1 , 
wherein the security conditions reflect at least one of the environment in which said security 
device is operated and the network interface over which a request for AKA processing 
originates. 

53. (previously presented) The tamper-resistant security device according to claim 51, 
wherein said security policy processing includes at least one of a security policy decision process 
and a security policy enforcement process. 

54. (previously presented) The tamper-resistant security device according to claim 5 1 , 
wherein said means for performing security policy processing comprises means for selectively 
disabling direct access to said AKA module. 

55. (previously presented) The tamper-resistant security device according to claim 5 1 , 
wherein said tamper-resistant security device comprises means for detecting whether said 
tamper-resistant security device is operated in its normal enviroimient or in an enviroiunent 
considered insecure, and said means for performing security policy processing comprises means 
for disabling direct access to said AKA module when operated in said insecure environment. 

56. (previously presented) The tamper-resistant security device according to claim 44, 
wherein said cooperating application includes a security enhancing application, and said security 
device further comprises means for transferring a request for AKA processing directly to said 
AKA module if said security device is operated in an environment considered secure, and means 
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for transferring said request to said security enhancing application if said security device is 
operated in an environment considered insecure. 

57. (previously presented) The tamper-resistant security device according to claim 44, 
wherein said cooperating application is performing at least part of the computations in 
connection with end-to-end key agreement between users. 

58. (previously presented) The tamper-resistant security device according to claim 44, 
wherein said cooperating application is masking key information generated by said AKA 
module. 

59. (previously presented) The tamper-resistant security device according to claim 44, 
wherein said cooperating application is a software application installed in an application 
environment of said tamper-resistant security device. 

60. (previously presented) The tamper-resistant security device according to claim 59, 
wherein said application is securely downloaded into said tamper-resistant security device from a 
trusted party. 

6 1 . (previously presented) The tamper-resistant security device according to claim 44, 
wherein said cooperating application is a privacy enhancing application, which participates in 
managing a user pseudonym. 
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62. (previously presented) The tamper-resistant security device according to claim 61 , 
wherein said privacy enhancing application is requesting an AKA response from said AKA 
module based on an old user pseudonym and for generating a previously presented user 
pseudonym based on the received AKA response. 

63. (currently amended) AThe tamper-resistant securitv device according to claim 
4 4having moans for storing user orod e ntials, including at l e ast a s e curity koy, an Auth e ntication 
and K e y Agreem e nt (AKA) modul e for performing an AKA proc e ss with said s e curity k e y, and 
m e ans for ext e rnal communication , 

wherein said tamp e r - resistant s e curity devic e furth e r compris e s the application is a 
software application implemented in an application environment of said tamper-resistant security 
device and adapted for cooperating with said AKA module, and said AKA module is also 
implemented, at least partly, as a software application in said application envirormient. 

64. (currently amended) A user terminal provided with a tamper-resistant security 
devic e according to claim 44 , said tamper r e sistant s e curity d e vic e having means for storing us e r 
crodontials, including at l e ast a s e curity key, an Authentication and K e y Agr ee m e nt (AK.^) 
module for p e rforming an AKA proc e ss with said security key, and m e ans for communication 
with said us e r t e rminal, 

wh e r e in said tamp e r r e sistant s e curity d e vic e furth e r compris e s: 

an application for coop e ration with said AKA modul e ; and 

m e ans for - int e rfaoing said AKA modul e and said coop e rating application . 
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65. (previously presented) The user terminal according to claim 64, wherein said 
cooperating application is at least one of a security enhancing application and a privacy 
enhancing application. 

66. (previously presented) The user terminal according to claim 64, wherein said 
cooperating application is performing enhanced security processing of at least one parameter 
associated with said AKA process. 

67. (previously presented) The user terminal according to claim 66, wherein said ^ 
enhanced security processing includes encapsulation of said at least one AKA parameter for 
producing an output parameter of higher security than said at least one AKA parameter. 

68. (previously presented) The user terminal according to claim 64, fUrther comprising 
means for performing security policy processing based on information representative of security 
conditions in relation to said tamper-resistant security device. 

69. (previously presented) The user terminal according to claim 68, wherein the 
security conditions reflect at least one of the environment in which said security device is 
operated, the network interface over which a request for AKA processing comes, and the 
network used by the user terminal for network communication. 
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70. (previously presented) The user terminal according to claim 68, wherein said 
security policy processing includes at least one of a security policy decision process and a 
security policy enforcement process. 

71 . (previously presented) The user terminal according to claim 68, wherein said 
means for performing security policy processing is implemented in said tamper-resistant security 
device for selectively disabling direct access to said AKA module. 

72. (previously presented) The user terminal according to claim 64, wherein said 
cooperating application is a security enhancing application, and said security device further 
comprises means for transferring a request for AKA processing directly to said AKA module if 
said security device is operated in an environment considered secure, and means for transferring 
said request to said security enhancing application if said security device is operated in an 
environment considered insecure. 

73. (previously presented) The user terminal according to claim 64, wherein said 
cooperating application includes a security enhancing application, and said user terminal further 
comprises means for transferring a request for AKA processing directly to said AKA module if 
said request comes over an interface considered secure, and means for transferring said request 
to said security enhancing application if said request comes over an interface considered 
insecure. 



-8- 



1419181 



NASLUND et al. 
Appl. No. 10/530,293 
December 24, 2008 

74. (previously presented) The user terminal according to claim 73, wherein said 
security enhancing application comprises a number of different security enhancing modules, and 
said security enhancing application is for selecting among said security enhancing modules in 
dependence on the type of interface. 

75. (previously presented) The user terminal according to claim 64, wherein said 
cooperating application is a software application installed in an application environment of said 
tamper-resistant security device. 

76. (previously presented) The user terminal according to claim 64, wherein said 
cooperating application includes a security enhancing application authenticating a network over 
which said user terminal intends to communicate. 

77. (currently amended) A network server managed by a trusted party sharing a 
security key with a tamper-resistant security device implemented in a user terminal according to 
claim 64 , said tamp e r r e sistant s e curity d e vic e having an Auth e ntication and K e y Agr ee m e nt 
(AKj\) module for p e rforming an AKA proc e ss with said s e curity k e y, 

wh e rein said n e twork serv e r compris e s m e ans for downloading a softwar e application 
adapt e d for int e rfacing and coop e rating with said AKA modul e into an 
application e nvironm e nt of said tamp e r r e sistant d e vic e. 
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78. (previously presented) The network server according to claim 77, wherein said 
download application is at least one of a security enhancing application, a privacy enhancing 
application, and a security policy application. 
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